Disclaimer: I'm a former LastPass employee who left more than a year ago.

The other posters in this thread are extremely negative about LastPass' business model with this move

They have a huge number of enterprise customers. The CEO has said this himself on HN: https://news.ycombinator.com/item?id=8116479. This comment was >2 years ago.

Suggesting LastPass is selling data about it's customers is ridiculous. People like the product they have built and are willing to pay for it. Holding customers data hostage on a device was something people didn't like.

Can anyone shed some light onto how they are going to be making money now? I know there is some kind of useful info they can derive from letting users voluntarily have their password db's scanned for strength/pw duplication/etc, is there some money to be made selling something derived from that to third parties?

Yeah, have we gone from paying for the product to being the product, as the saying goes